{"report_id":"9a674bd2-007c-4bd5-bc3b-cf01844b9046","version":0,"status":"done","tags":[],"date":"2026-08-25T21:11:24Z","url":{"schema":"http","addr":"getavast.ru/","fqdn":"getavast.ru","domain":"getavast.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":0,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"getavast.ru/","fqdn":"getavast.ru","domain":"getavast.ru","tld":"ru"},"title":"Avast Free Antivirus — скачать бесплатный антивирус для Windows","dom":{"size":17156,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (335)","md5":"20c8ca6c5317a9ec41190338501208e8","sha1":"961b2f004be57b4d24d1ba519c324a95a4a3c5ec","sha256":"679024dcf7efe535a195cdeceade94245b2587fd37e2855d68b6f8e12454c70e","sha512":"a74b55962b39b6a7b3a03129ac3e358cdfbc21636819385b1b65b91efb9348cee70b4b5db068d31f65cc267e2ed98006be4a39865d8a366267d4518db280eb1c","ssdeep":"192:FILTL9S9ugssV9TwIIP0R8S7EhxuM0U4XXO9NVdgd4Hd:FKM9ZstII8RtEhxliXOY4","tlshash":"0772422111f828da0101a14bda197b0d3de655bfaf6a1611317c2dbe7fe3ea4c82764e","dom_hash":"domhash105ac78702ca0c2f507f0100f89e5933","first_seen":"2026-08-25T20:58:13.144029Z","last_seen":"2026-08-25T21:11:25.546528Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"getavast.ru/","fqdn":"getavast.ru","domain":"getavast.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":0,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-29T21:11:24Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getavast.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getavast.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getavast.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getavast.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"getavast.ru","ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"domain_registered":"2026-08-14","domain_rank":0,"first_seen":"2026-08-25T20:58:09.724656Z","last_seen":"2026-08-25T20:58:09.724656Z","alert_count":24,"request_count":6,"received_data":127045,"sent_data":2877,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"getavast.ru/","fqdn":"getavast.ru","domain":"getavast.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"cb84ee06e1615d13623c927ecd1752be","sha1":"65cb77bdc26835e83db269baae67051a97338dd5","sha256":"a4d0a2fd533e5a574c90a3d214e59f30fe32f7240c0cb2f7e4e09667a2796531","sha512":"12c7888c4bb87caa2d6192936d975217d79611342ea6cc55488c5a5fa771ef761ecc91d65ab9b6417eb184460c8c64566258da990ad9090dec4104d5b65da3d1","ssdeep":"","tlshash":"b9f0e177b88492b5c2f63131532ba31c712718ba2089ac34894dcc81797ec59102fd6d","size":576,"data":"","first_seen":"2026-08-25T20:58:13.167193Z","last_seen":"2026-08-25T21:11:25.564156Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getavast.ru/assets/app.js","fqdn":"getavast.ru","domain":"getavast.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"c7c2a5837cf03fea1b8e0c75b396e061","sha1":"74a4b25b99eaa9dee5b50bb1500e78468e9f09f9","sha256":"9e3c74ca1222bf2f30157bbc601b0ac5b5f412f56ed9915a63e0c832c4361f8c","sha512":"68461667a41ee3b5c2fbbf2575c455d66cdfac02964cd496ed02136c6fc033e082102ffc84390ec0edb57c8a0704f8af339a70c0a23a8af51942df10ca32ca0e","ssdeep":"96:3a/Hya7q5Vqip5TYVhUmJMwboEfX2edHExZKAI1ekyty50XTMRxLKeW5LO/:q/HyUqXqip5MALwboEfXvREx9Im4GkWg","tlshash":"88c17769fce731b200a7b17e6a8f554db6b0022b9045c9013d5c9b862fa4b7407be9da","size":5967,"data":"","first_seen":"2026-08-25T20:58:13.158828Z","last_seen":"2026-08-25T21:11:25.55817Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"getavast.ru/assets/style.css","fqdn":"getavast.ru","domain":"getavast.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://getavast.ru/","date":"2026-08-25T21:10:58.197Z","timestamp":1787692258197,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.getavast.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 20:09:12 GMT","end":"Mon, 16 Nov 2026 20:09:11 GMT"},"fingerprint":{"sha1":"2E:5D:48:DA:7F:29:1F:A7:2E:D3:88:35:C9:81:5E:C0:F6:69:D7:9F","sha256":"BE:42:27:4B:FD:F8:40:B8:BB:60:E3:C9:9D:09:0B:77:C8:32:28:1F:0C:0B:6A:15:F7:9A:4A:30:BC:38:14:18"}}},"request":{"raw":"GET /assets/style.css HTTP/1.1\r\nHost: getavast.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://getavast.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:10:58 GMT\r\ncontent-type: text/css\r\ncontent-length: 3598\r\nlast-modified: Fri, 14 Aug 2026 08:54:32 GMT\r\netag: \"3116-658fdf81ba81c-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12566,"size_decoded":4059,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"195396fad1ab63679903a21ad7064c30","sha1":"fa00ac11832dab6c5e181084a70dc083ce69688d","sha256":"d272416fb160db0fcaba22d15aef629bc2bd00320ffc885a55cb96fc83bb5bed","sha512":"630a8695fc48cb5701dfdea567a7e7b1921492485f29db94021d3ba43d8bb0079de2c44c6afe4cb31c0d441c8940e81755f0e1369b6235f7192902efe37099ef","ssdeep":"192:wJJIKJyNdyIbGnrHICDKtoehSCUCACLeRPjoRWrq8CGf//wHPgfO5T:LwqtbZUM6R7OTGf//wvgyT","tlshash":"8d4275836b751328b42be5a8b6939789b33c60029809d97d5be9101ccecd2fd907bb5d","first_seen":"2026-08-25T20:58:13.14878Z","last_seen":"2026-08-25T21:11:25.553737Z","times_seen":2,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getavast.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getavast.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getavast.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getavast.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getavast.ru/assets/hero-main.webp","fqdn":"getavast.ru","domain":"getavast.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://getavast.ru/","date":"2026-08-25T21:10:58.199Z","timestamp":1787692258199,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.getavast.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 20:09:12 GMT","end":"Mon, 16 Nov 2026 20:09:11 GMT"},"fingerprint":{"sha1":"2E:5D:48:DA:7F:29:1F:A7:2E:D3:88:35:C9:81:5E:C0:F6:69:D7:9F","sha256":"BE:42:27:4B:FD:F8:40:B8:BB:60:E3:C9:9D:09:0B:77:C8:32:28:1F:0C:0B:6A:15:F7:9A:4A:30:BC:38:14:18"}}},"request":{"raw":"GET /assets/hero-main.webp HTTP/1.1\r\nHost: getavast.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://getavast.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:10:58 GMT\r\ncontent-type: image/webp\r\ncontent-length: 86854\r\nlast-modified: Fri, 14 Aug 2026 08:54:32 GMT\r\netag: \"15346-658fdf8110540\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":86854,"size_decoded":87267,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1600x1066, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6d3cffefece35c77aed1f510d69618db","sha1":"04e74c50161f7111f6213897b537989ec5100dcb","sha256":"852e7494435add02eb809b2bd9bcadb3bc6f340a822a3a317695ada950ef4c96","sha512":"0542b21f151250e1cc025f8d9b70c0886b8695e8657de134acc60ee08f5ffc486bb204b1d1048ef5475a5835ed296ef2f7acc57ce075bd3b4bc785b48d20b02c","ssdeep":"1536:6nMqT97SQPsNmqnsFhJTvjJJZYlfdkq7AVnvS2r/Vaj7hU0dIHAXQ:Up7SWsNmqnobfm7AEHjIHAg","tlshash":"04831215f32e203ac47b9aacbdc18844362346596cc5cf378ff99692b897ebf05684c5","first_seen":"2026-08-25T20:58:13.151813Z","last_seen":"2026-08-25T21:11:25.556091Z","times_seen":2,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":88,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getavast.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getavast.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getavast.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getavast.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getavast.ru/assets/app.js","fqdn":"getavast.ru","domain":"getavast.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://getavast.ru/","date":"2026-08-25T21:10:58.200Z","timestamp":1787692258200,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.getavast.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 20:09:12 GMT","end":"Mon, 16 Nov 2026 20:09:11 GMT"},"fingerprint":{"sha1":"2E:5D:48:DA:7F:29:1F:A7:2E:D3:88:35:C9:81:5E:C0:F6:69:D7:9F","sha256":"BE:42:27:4B:FD:F8:40:B8:BB:60:E3:C9:9D:09:0B:77:C8:32:28:1F:0C:0B:6A:15:F7:9A:4A:30:BC:38:14:18"}}},"request":{"raw":"GET /assets/app.js HTTP/1.1\r\nHost: getavast.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://getavast.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:10:58 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 22 Aug 2026 14:00:28 GMT\r\netag: W/\"174f-659a32cf0208d\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5967,"size_decoded":2620,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"c7c2a5837cf03fea1b8e0c75b396e061","sha1":"74a4b25b99eaa9dee5b50bb1500e78468e9f09f9","sha256":"9e3c74ca1222bf2f30157bbc601b0ac5b5f412f56ed9915a63e0c832c4361f8c","sha512":"68461667a41ee3b5c2fbbf2575c455d66cdfac02964cd496ed02136c6fc033e082102ffc84390ec0edb57c8a0704f8af339a70c0a23a8af51942df10ca32ca0e","ssdeep":"96:3a/Hya7q5Vqip5TYVhUmJMwboEfX2edHExZKAI1ekyty50XTMRxLKeW5LO/:q/HyUqXqip5MALwboEfXvREx9Im4GkWg","tlshash":"88c17769fce731b200a7b17e6a8f554db6b0022b9045c9013d5c9b862fa4b7407be9da","first_seen":"2026-08-25T20:58:13.158828Z","last_seen":"2026-08-25T21:11:25.55817Z","times_seen":2,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getavast.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getavast.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getavast.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getavast.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getavast.ru/assets/avast-logo.svg","fqdn":"getavast.ru","domain":"getavast.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://getavast.ru/","date":"2026-08-25T21:10:58.204Z","timestamp":1787692258204,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.getavast.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 20:09:12 GMT","end":"Mon, 16 Nov 2026 20:09:11 GMT"},"fingerprint":{"sha1":"2E:5D:48:DA:7F:29:1F:A7:2E:D3:88:35:C9:81:5E:C0:F6:69:D7:9F","sha256":"BE:42:27:4B:FD:F8:40:B8:BB:60:E3:C9:9D:09:0B:77:C8:32:28:1F:0C:0B:6A:15:F7:9A:4A:30:BC:38:14:18"}}},"request":{"raw":"GET /assets/avast-logo.svg HTTP/1.1\r\nHost: getavast.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://getavast.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:10:58 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 452\r\nlast-modified: Fri, 14 Aug 2026 08:54:31 GMT\r\netag: \"2da-658fdf80d30b5-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":730,"size_decoded":864,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a1392aa779cdd3d160e48ec7c23f0754","sha1":"4a940b90c8f7ee99b0c770b6dac38fd6efa82221","sha256":"5d209d6c2a8d83150d70a239f00e2fafa3d83bb5d548416f7eeada33fb008b47","sha512":"0ad2998a9d6749122580bc525b33bfbb7993015c603538c946341b97318f7f05782f6987b4e66118032746d08e12c78acdd3ea932e008e71f297d5c953e8e0e4","ssdeep":"","tlshash":"9c0144dc93dd0cdc8a079ff0afd46a4c17cf38f47488037caa5c81ab1209191e81e654","first_seen":"2026-08-25T20:58:13.16166Z","last_seen":"2026-08-25T21:11:25.560039Z","times_seen":2,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getavast.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getavast.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getavast.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getavast.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getavast.ru/assets/avast-logo.svg","fqdn":"getavast.ru","domain":"getavast.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://getavast.ru/","date":"2026-08-25T21:10:58.464Z","timestamp":1787692258464,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.getavast.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 20:09:12 GMT","end":"Mon, 16 Nov 2026 20:09:11 GMT"},"fingerprint":{"sha1":"2E:5D:48:DA:7F:29:1F:A7:2E:D3:88:35:C9:81:5E:C0:F6:69:D7:9F","sha256":"BE:42:27:4B:FD:F8:40:B8:BB:60:E3:C9:9D:09:0B:77:C8:32:28:1F:0C:0B:6A:15:F7:9A:4A:30:BC:38:14:18"}}},"request":{"raw":"GET /assets/avast-logo.svg HTTP/1.1\r\nHost: getavast.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://getavast.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:10:58 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 452\r\nlast-modified: Fri, 14 Aug 2026 08:54:31 GMT\r\netag: \"2da-658fdf80d30b5-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":730,"size_decoded":864,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a1392aa779cdd3d160e48ec7c23f0754","sha1":"4a940b90c8f7ee99b0c770b6dac38fd6efa82221","sha256":"5d209d6c2a8d83150d70a239f00e2fafa3d83bb5d548416f7eeada33fb008b47","sha512":"0ad2998a9d6749122580bc525b33bfbb7993015c603538c946341b97318f7f05782f6987b4e66118032746d08e12c78acdd3ea932e008e71f297d5c953e8e0e4","ssdeep":"","tlshash":"9c0144dc93dd0cdc8a079ff0afd46a4c17cf38f47488037caa5c81ab1209191e81e654","first_seen":"2026-08-25T20:58:13.16166Z","last_seen":"2026-08-25T21:11:25.560039Z","times_seen":2,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getavast.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getavast.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getavast.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getavast.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getavast.ru/","fqdn":"getavast.ru","domain":"getavast.ru","tld":"ru"},"ip":{"addr":"185.26.122.8","port":443,"asn":62082,"as":"Hostland LTD","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-25T21:10:57.817Z","timestamp":1787692257817,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.getavast.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 20:09:12 GMT","end":"Mon, 16 Nov 2026 20:09:11 GMT"},"fingerprint":{"sha1":"2E:5D:48:DA:7F:29:1F:A7:2E:D3:88:35:C9:81:5E:C0:F6:69:D7:9F","sha256":"BE:42:27:4B:FD:F8:40:B8:BB:60:E3:C9:9D:09:0B:77:C8:32:28:1F:0C:0B:6A:15:F7:9A:4A:30:BC:38:14:18"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: getavast.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 21:10:58 GMT\r\ncontent-type: text/html\r\ncontent-length: 5249\r\nlast-modified: Sat, 22 Aug 2026 13:52:25 GMT\r\netag: \"44d2-659a3101c05e4-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=0, must-revalidate\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17618,"size_decoded":5710,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (315), with CRLF, CR line terminators","md5":"dfba37d733d33ac85adec73199c9bf1e","sha1":"1267d61d42502fb6df8fcc02d79b93b0aa5c27da","sha256":"851c0cb0939e959aabd7e646441ad82e953b623a7ad3904483a384bd00a8025b","sha512":"3f3088844e620d0c58412974f8b52a4a0069a81d57463f98466cc3d2065f95b15e3a1d7db211f02582b32091227209d9788407cfac9206537354ad6e03d20731","ssdeep":"192:9TvuemzyoZ79TiIIu0Wqf0o3kuMnzock92V/gd4rh:9TdcyoaIIrWVo3klsckp8","tlshash":"8272422111d8289a0132a15ada15bb4cfca641bf6f6a162131bc2e7f3ff3e64c827549","first_seen":"2026-08-25T20:58:13.164581Z","last_seen":"2026-08-25T21:11:25.561957Z","times_seen":2,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":67,"connect":43,"send":0,"wait":58,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getavast.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getavast.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getavast.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"getavast.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}